$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft File: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft (raw, json) Hash identifier: 5afvz1q3x+eU25RfNo7WDOgvzobGWtA33rKqSlrUX+I= Subject key identifier: 0D:64:F4:31:B5:77:57:94:F0:5C:90:01:BA:65:1E:5F:F8:3D:AE:C3 Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 2C187FF29D09B58CCE5CC18A60DC47BFFA3D4963 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft Manifest number: 10 Signing time: Wed 13 May 2026 15:20:39 +0000 Manifest this update: Wed 13 May 2026 15:15:39 +0000 Manifest next update: Thu 14 May 2026 19:03:39 +0000 Files and hashes: 1: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl (hash: w0LVS5c9hEhThFOMFosN6UoIC1cb8hlwVDFQtG2Ripg=) 2: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=) 3: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8=) 4: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 19:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:18:7f:f2:9d:09:b5:8c:ce:5c:c1:8a:60:dc:47:bf:fa:3d:49:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: May 13 15:15:39 2026 GMT Not After : May 14 19:03:39 2026 GMT Subject: CN=0D64F431B5775794F05C9001BA651E5FF83DAEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:4d:de:d4:8d:fe:3f:c2:e0:4c:a5:33:9e: 8f:47:9f:97:72:8a:b5:51:18:b7:70:40:46:6e:86: c8:c5:c7:28:cf:49:a2:41:82:bf:af:8a:33:fe:be: 60:d6:cd:af:1d:00:b5:7b:01:7b:4f:19:cd:b2:da: 45:e7:9e:d6:cc:dd:94:37:bf:9a:01:ee:f2:27:90: 52:ac:cf:19:1c:da:7d:9b:2d:a0:58:84:93:77:1c: 10:40:b8:b3:0f:02:b0:e4:24:86:a6:d9:89:d8:ba: d0:30:6e:81:b8:01:01:3c:fd:e1:d4:0d:27:a6:47: 0c:9a:ce:c8:7b:0a:c6:14:93:c4:09:46:f1:ca:5b: 20:50:ac:b3:45:d6:2f:2a:40:77:cb:2a:8b:c7:29: b7:ad:f3:21:17:0c:3e:39:31:53:ca:c5:43:bb:ca: 17:f5:d7:d5:bd:27:74:3c:c1:54:49:0c:c8:01:97: 7a:82:dd:71:98:57:62:0f:8d:d5:79:f9:c3:34:2f: 40:07:e9:21:44:53:80:ee:e7:3f:50:ae:8d:9e:37: 70:57:b3:7e:ee:79:1d:a5:2f:0c:ab:4f:ad:f5:6b: e2:2f:c2:fb:b4:06:9d:99:26:33:1d:9f:02:b1:94: 2f:35:51:63:c6:14:cb:b0:d5:32:f5:f1:ae:27:ce: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:64:F4:31:B5:77:57:94:F0:5C:90:01:BA:65:1E:5F:F8:3D:AE:C3 X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d0:b1:71:ed:8e:2a:1e:62:c0:a7:cc:f9:2d:30:79:80:d5: d1:08:41:93:75:5d:8f:28:39:1b:aa:da:52:87:91:8c:50:89: bd:b1:d3:dd:bf:45:80:2b:d7:76:1b:04:0d:f4:69:b3:37:5f: 30:f0:d7:70:63:ad:09:1a:2a:39:76:d7:d2:5b:55:f3:72:b2: f0:4c:18:ed:0f:bf:a1:2d:cb:e5:13:2e:34:12:bb:b9:c6:26: c8:99:36:43:57:4b:10:1c:d6:3d:98:b8:e5:8a:77:55:0c:18: c9:0c:7c:8f:9f:f6:6c:3e:14:f5:24:31:56:50:c5:db:8e:01: 78:84:21:a3:2c:4e:a6:9c:0d:82:fa:8e:d5:d6:e9:78:6e:5c: 90:a6:bf:af:e9:a4:47:fb:f1:13:26:ef:19:fc:02:cc:3a:65: 61:7f:e7:6f:af:46:73:11:c4:1c:53:40:41:de:63:71:02:ba: 2f:99:25:2e:6b:12:7b:00:4e:3d:29:55:81:a8:37:5f:cb:6e: ec:d4:39:c4:4a:30:2f:dd:0f:70:ea:35:d8:4c:9c:9a:66:18: 04:37:0f:94:56:84:47:47:e0:95:28:34:96:3c:fb:65:3c:9f: c3:00:ab:db:1d:df:9f:36:05:1e:46:2a:29:c7:dd:7b:55:f6: 19:05:ab:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBh/8p0JtYzOXMGKYNxHv/o9SWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjA1MTMxNTE1MzlaFw0yNjA1MTQxOTAzMzlaMDMxMTAvBgNV BAMTKDBENjRGNDMxQjU3NzU3OTRGMDVDOTAwMUJBNjUxRTVGRjgzREFFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXf03e1I3+P8LgTKUzno9Hn5dy irVRGLdwQEZuhsjFxyjPSaJBgr+vijP+vmDWza8dALV7AXtPGc2y2kXnntbM3ZQ3 v5oB7vInkFKszxkc2n2bLaBYhJN3HBBAuLMPArDkJIam2YnYutAwboG4AQE8/eHU DSemRwyazsh7CsYUk8QJRvHKWyBQrLNF1i8qQHfLKovHKbet8yEXDD45MVPKxUO7 yhf119W9J3Q8wVRJDMgBl3qC3XGYV2IPjdV5+cM0L0AH6SFEU4Du5z9Qro2eN3BX s37ueR2lLwyrT631a+Ivwvu0Bp2ZJjMdnwKxlC81UWPGFMuw1TL18a4nzlt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWT0MbV3V5TwXJABumUeX/g9rsMwHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2 QjdGQjZFNEQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbQsXHtjioeYsCnzPktMHmA1dEIQZN1XY8o ORuq2lKHkYxQib2x092/RYAr13YbBA30abM3XzDw13BjrQkaKjl219JbVfNysvBM GO0Pv6Ety+UTLjQSu7nGJsiZNkNXSxAc1j2YuOWKd1UMGMkMfI+f9mw+FPUkMVZQ xduOAXiEIaMsTqacDYL6jtXW6XhuXJCmv6/ppEf78RMm7xn8Asw6ZWF/52+vRnMR xBxTQEHeY3ECui+ZJS5rEnsATj0pVYGoN1/LbuzUOcRKMC/dD3DqNdhMnJpmGAQ3 D5RWhEdH4JUoNJY8+2U8n8MAq9sd3582BR5GKinH3XtV9hkFq6E= -----END CERTIFICATE-----Generated at Thu May 14 08:34:30 2026 by rpki-client